Things Every Developer Should Know About Security - Chris Romeo - ASW #124 | Security Weekly Podcast Network (Video) Podcast

Things Every Developer Should Know About Security - Chris Romeo - ASW #124: Developers are at the center of properly securing applications. A large number of security issues bury developers. We must understand the things every developer must know about security in order to help them. We must practice developer empathy,... by Application Security Weekly (Video)

36 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Application Security Weekly (Video)

40 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Video)

40 min listen

Mobile Application Security - Ryan Lloyd - ASW #174: Mobile applications have a unique attack surface. The tools and techniques being used to compromise these environments are constantly evolving. We'll talk about how to harden mobile apps against modern threats. This segment is sponsored by... by Security Weekly Podcast Network (Video)

32 min listen

Mobile Application Security - Ryan Lloyd - ASW #174: Mobile applications have a unique attack surface. The tools and techniques being used to compromise these environments are constantly evolving. We'll talk about how to harden mobile apps against modern threats. This segment is sponsored by... by Application Security Weekly (Video)

32 min listen

The Psychology of Training - Matias Madou - ASW #198: Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the same reasons. We'll talk about how the definition of secure coding varies among developers and appsec teams, why it's important to... by Security Weekly Podcast Network (Video)

37 min listen

The Psychology of Training - Matias Madou - ASW #198: Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the same reasons. We'll talk about how the definition of secure coding varies among developers and appsec teams, why it's important to... by Application Security Weekly (Video)

37 min listen

ASW #212 - Sam Placette: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Audio)

82 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Application Security Weekly (Video)

37 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Security Weekly Podcast Network (Video)

37 min listen

How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107 by Application Security Weekly (Video)

37 min listen

How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107: DevOps and Agile IT practices have been around for a while. However, security teams are just now catching up. We will discuss how security teams can stop being “showstoppers” for the developers and actually work with them, not against them. Focus... by Security Weekly Podcast Network (Video)

37 min listen

Social Engineering Attacks Through Vishing & Phishing - Whitney Maxwell - ESW #202: Learn about some of the latest techniques attackers are using when phishing and vishing, including how to protect your users! This segment is sponsored by Rapid7. Visit to learn more about them! Visit for all the latest episodes! Show... by Security Weekly Podcast Network (Video)

32 min listen

Social Engineering Attacks Through Vishing & Phishing - Whitney Maxwell - ESW #202: Learn about some of the latest techniques attackers are using when phishing and vishing, including how to protect your users! This segment is sponsored by Rapid7. Visit to learn more about them! Visit for all the latest episodes! Show... by Enterprise Security Weekly (Video)

32 min listen

Application News - ASW #82: Top cloud security controls you should be using, State of Software Security X, Developers: The Cause of and Solution to Security's Biggest Problems, and much more! Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

33 min listen

Application News - ASW #82: Top cloud security controls you should be using, State of Software Security X, Developers: The Cause of and Solution to Security's Biggest Problems, and much more! Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

33 min listen

Web Asset Discovery in Application Security - Tolga Kayas - ESW #242: Large organizations develop hundreds of new web applications every year. Some of those deployments are lost in time, and others go wild with high severity vulnerabilities. Forgotten and outdated web applications are a common culprit of successful hack... by Security Weekly Podcast Network (Video)

30 min listen

Web Asset Discovery in Application Security - Tolga Kayas - ESW #242: Large organizations develop hundreds of new web applications every year. Some of those deployments are lost in time, and others go wild with high severity vulnerabilities. Forgotten and outdated web applications are a common culprit of successful hack... by Enterprise Security Weekly (Video)

30 min listen

Securing The Enterprise Software Supply Chain - Harry Sverdlove - PSW #678: SolarWinds is just the latest example of how the enterprise software supply chain, when compromised, can be used successfully by attackers. These coordinated and well-managed attacks prey on trust, so how can we trust our enterprise software? ... by Security Weekly Podcast Network (Video)

58 min listen

What Does Software Supply Chain Security Threat Mean to Developers? - Dr. Chenxi Wang - ASW #194: How should we empower developers to embrace the NIST software development practices? Because from here on out, developers need to view themselves as the front lines of defense for the end-consumer. A more secure-aware developer leads to a... by Security Weekly Podcast Network (Video)

35 min listen

What Does Software Supply Chain Security Threat Mean to Developers? - Dr. Chenxi Wang - ASW #194: How should we empower developers to embrace the NIST software development practices? Because from here on out, developers need to view themselves as the front lines of defense for the end-consumer. A more secure-aware developer leads to a... by Application Security Weekly (Video)

35 min listen

CSP #113 - The Rise of the Chief Product Security Officer - Jason Christman: Cybersecurity is becoming a #1 business risk for many organizations. For CISOs to effectively manage this risk, proper strategy, adequate resourcing, and leadership support are all essential, but not enough. CISOs need a trusted partner on the... by CISO Stories Podcast (Audio)

26 min listen

How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205: Pressured by the speed of innovation, organizations are struggling to achieve the continuous web application security they need in the face of mounting threats and compliance requirements. What does it take in order for your AppSec program to be both... by Security Weekly Podcast Network (Video)

37 min listen

How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205: Pressured by the speed of innovation, organizations are struggling to achieve the continuous web application security they need in the face of mounting threats and compliance requirements. What does it take in order for your AppSec program to be both... by Application Security Weekly (Video)

37 min listen

DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Security Weekly Podcast Network (Video)

41 min listen

DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Application Security Weekly (Video)

41 min listen

Shifting Right: What Security Engineers Can Learn From DevSecOps - Leif Dreizler - ASW #146: The security industry generally agrees on the value of enabling developers in an agile environment—although we don't agree on what to call it… “Shifting Left,” “Creating a Paved Path,” “DevSecOps.” Regardless of the name, we tend to... by Application Security Weekly (Video)

40 min listen

Shifting Right: What Security Engineers Can Learn From DevSecOps - Leif Dreizler - ASW #146: The security industry generally agrees on the value of enabling developers in an agile environment—although we don't agree on what to call it… “Shifting Left,” “Creating a Paved Path,” “DevSecOps.” Regardless of the name, we tend to... by Security Weekly Podcast Network (Video)

40 min listen

Platform Security - PaaS & Hosting - Trey Ford - ESW #221: - What security features does Heroku offer that the customer can control and how have these evolved over time? - How do you balance the security of the application, with the security of the deployment, with the security of the platform? - What are... by Enterprise Security Weekly (Video)

32 min listen

Platform Security - PaaS & Hosting - Trey Ford - ESW #221: - What security features does Heroku offer that the customer can control and how have these evolved over time? - How do you balance the security of the application, with the security of the deployment, with the security of the platform? - What are... by Security Weekly Podcast Network (Video)

32 min listen

Discover this podcast and so much more

Things Every Developer Should Know About Security - Chris Romeo - ASW #124

Things Every Developer Should Know About Security - Chris Romeo - ASW #124

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes